added certname to [main]